SY0-301無料問題集「CompTIA Security+ Certification Exam (SY0-301)」

質問 1

Configuring the mode, encryption methods, and security associations are part of which of the following?

（A）802.1x

（B）Full disk encryption

（C）PKI

（D）IPSec

正解：D 解答を投票する

質問 2

A hospital IT department wanted to secure its doctor's tablets. The IT department wants operating system level security and the ability to secure the data from alteration. Which of the following methods would MOST likely work?

（A）TPM

（B）Cloud storage

（C）Removal Media

（D）Wiping

正解：A 解答を投票する

質問 3

Joe, a security analyst, asks each employee of an organization to sign a statement saying that they understand how their activities may be monitored. Which of the following BEST describes this statement? (Select TWO).

（A）Risk acceptance policy

（B）Security policy

（C）Email policy

（D）Privacy policy

（E）Acceptable use policy

正解：D、E 解答を投票する

質問 4

A security analyst has been notified that trade secrets are being leaked from one of the executives in the corporation. When reviewing this executive's laptop they notice several pictures of the employee's pets are on the hard drive and on a cloud storage network. When the analyst hashes the images on the hard drive against the hashes on the cloud network they do not match. Which of the following describes how the employee is leaking these secrets?

（A）Social engineering

（B）Hashing

（C）Digital signatures

（D）Steganography

正解：D 解答を投票する

質問 5

A user has unknowingly gone to a fraudulent site. The security analyst notices the following system change on the user's host:
Old 'hosts' file:
127.0.0.1 localhost
New 'hosts' file:
127.0.0.1 localhost
5.5.5.5 www.comptia.com
Which of the following attacks has taken place?

（A）Phishing

（B）Spear phishing

（C）Vishing

（D）Pharming

正解：D 解答を投票する

質問 6

An Information Systems Security Officer (ISSO) has been placed in charge of a classified peer-topeer network that cannot connect to the Internet. The ISSO can update the antivirus definitions manually, but which of the following steps is MOST important?

（A）The signatures must have a hash value equal to what is displayed on the vendor site.

（B）All users must be logged off of the network prior to the installation of the definition file.

（C）A full scan must be run on the network after the DAT file is installed.

（D）The definition file must be updated within seven days.

正解：A 解答を投票する

質問 7

After a recent security breach, the network administrator has been tasked to update and backup all router and switch configurations. The security administrator has been tasked to enforce stricter security policies. All users were forced to undergo additional user awareness training. All of these actions are due to which of the following types of risk mitigation strategies?

（A）Change management

（B）Lessons learned

（C）Implementing policies to prevent data loss

（D）User rights and permissions review

正解：B 解答を投票する

質問 8

Use of group accounts should be minimized to ensure which of the following?

（A）Regular auditing

（B）Baseline management

（C）Individual accountability

（D）Password security

正解：C 解答を投票する

質問 9

Which of the following protocols encapsulates an IP packet with an additional IP header?

（A）SSL

（B）SFTP

（C）HTTPS

（D）IPSec

正解：D 解答を投票する

質問 10

Ann works at a small company and she is concerned that there is no oversight in the finance department; specifically, that Joe writes, signs and distributes paychecks, as well as other expenditures. Which of the following controls can she implement to address this concern?

（A）Mandatory vacations

（B）Separation of duties

（C）Time of day restrictions

（D）Least privilege

正解：B 解答を投票する

質問 11

Pete, the system administrator, wishes to monitor and limit users' access to external websites. Which of the following would BEST address this?

（A）Use server load balancers.

（B）Block all traffic on port 80.

（C）Install a proxy server.

（D）Implement NIDS.

正解：C 解答を投票する

質問 12

Which of the following ports is used to securely transfer files between remote UNIX systems?

（A）69

（B）22

（C）21

（D）445

正解：B 解答を投票する

質問 13

Which of the following is a requirement when implementing PKI if data loss is unacceptable?

（A）Non-repudiation

（B）Certificate revocation list

（C）Web of trust

（D）Key escrow

正解：D 解答を投票する

質問 14

Which of the following is characterized by an attack against a mobile device?

（A）Header manipulation

（B）Blue jacking

（C）Evil twin

（D）Rogue AP

正解：B 解答を投票する

SY0-301 無料問題集「CompTIA Security+ Certification Exam (SY0-301)」

弊社を連絡する

関連リンク

トップ試験